So I've been trying to pare back the "tools' a bit.. Been following the various threads.. Use Sandboxie for browsing from home in XP. Have been happy with Prevx and Sophos behind a router for a while, but getting a bit dispirited about what seems to be a 'pause' in PrevX development and updates and what appears to be an internal conflict of interest btwn PrevX and PrevX CSI that so far has not been addressed to my satisfaction. Shame really. I hope PrevX will lift itself soon. PrevX will also 'reach into" the sandbox but doesn't seem to want to delete or quarantine the sandbox at first go. Just asks about run or not. TF been getting some good press An update on Sandboxie and TF for 'testing' dl's that might be a mal or not ? Does TF interact with the sandbox function of DW in any similar fashion? Realistically at home I spend most of my time in Linux in a VM but still need M$ for various work related bits and pieces: heh: very important bits and pieces !!. (Will soon move to Linux as primary and M$ in VM at home ) Finally have put my office on-line -has to be M$- behind a router with Sophos and need some Really safe options for office workers to be behind ( as well as limited rights in XP ) My office team will not handle multiple pop-ups well. They will occasionally be browsing..retrieving documents and pdfs and connecting to outside servers.. No e-mail as yet..by design..dont want it if p[ossible or if have to have it: one way only I think.. LOL; have yet to address VPN and tunnelling between home and office: will be getting some extra help there !!. Amazingly complex what many here no doubt take for granted. For the office, ?WinPatrol? +/- ?TF? , ?stick with PrevX? Any comments? advices?: just sort of casting a line to tap into the accumulated KB.. Thx. Edit: so after all that ramble: 1: Application control 2: Outbound filter ??